Home/Product/sirv
Product

sirv

12 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-46233
< 7.5.4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting S
6.5MEDIUM
CVE-2024-10855
< 7.3.1
The Image Optimizer, Resizer and CDN - Sirv plugin for WordPress is vulnerable to unauthorized modification of data that can lead
8.1HIGH
CVE-2024-8964
< 7.3.0
The Image Optimizer, Resizer and CDN - Sirv plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads
6.4MEDIUM
CVE-2024-8480
< 7.2.8
The Image Optimizer, Resizer and CDN - Sirv plugin for WordPress is vulnerable to unauthorized modification of data due to a missi
8.8HIGH
CVE-2024-6392
< 7.2.8
The Image Optimizer, Resizer and CDN - Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to
5.4MEDIUM
CVE-2024-5853
< 7.2.7
The Image Optimizer, Resizer and CDN - Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type
9.9CRITICAL
CVE-2024-32959
< 7.2.3
Incorrect Privilege Assignment vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <=
8.8HIGH
CVE-2023-50898
<= 7.1.2
Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2.
5.4MEDIUM
CVE-2024-27950
< 7.2.1
Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.
5.4MEDIUM
CVE-2024-27949
< 7.2.1
Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through
5.4MEDIUM
CVE-2022-4119
< 6.8.1
The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could
4.8MEDIUM
CVE-2016-10950
< 1.3.2
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
8.8HIGH
threatengine.sh